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(54) Abstract Title 

Network management apparatus and method for determining the topology of a network 

(57) A network management apparatus and method for determining the topology of a network in which a 
Spanning-Tree protocol Is implemented, is disclosed in which address table data is obtained from the ports of 
the core network devices on the network, and the identity of the ports of the core network devices are 
determined. Spanning-Tree protocol information is obtained from the core network devices and used to 
process the address table data to remove data relating to ports having links which are inactive. The topology 
of the network is then determined using the processed data by first selecting one of the core network devices 
as a root network device, and then using the processed address table data to build a network tree from the 
selected root device. 
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NETWORK MANAGEMENT APPARATUS AND METHOD FOR 
DETERMINING THE TOPOLOGY OF A NETWORK 

The present invention relates generally to network management systems and more 
5 particularly to a network management apparatus and method capable of determining 
the topology of a network. 

The following description is concerned with a data communications network, and in 
particular a local area network (LAN), but it will be appreciated that the present 
10 invention has more widespread applicability to other managed communications 
systems and networks including wide area networks (WANs) and wireless 
communications networks. 

Data communications networks typically comprise a plurality of network devices 
15 (computers, peripherals and other electronic devices) capable of communicating with 
each other by sending and receiving data packets in accordance with predefined 
network protocols. Each network device is connected by at least one port to the 
network media, which in the case of a LAN network may be coaxial cable, twisted 
pair cable or fibre optic cable. Each device on the network typically has hardware for 
20 media access control (MAC) with .its own unique MAC address. Data packets are 
sent and received in accordance with the MAC protocol (e.g. CSMA/CD protocol as 
defined by the standard IEEE 802.2, commonly known as Ethernet). Data packets 
transmitted using the MAC protocol identify the source MAC address (i.e. the MAC 
address of the device sending the data packet) and the destination MAC address (Le. 
25 the MAC address of the device for which the data packet is destined) in the header of 
the data packet. 

A network is generally configured with core devices having a plurality of ports, which 
can be used to interconnect a plurality of media links on the network. Such devices 
30 include hubs, repeaters, routers and switches which forward data packets received at 
one port to one or more of its other ports, depending upon the type of device. For 
example, a switch forwards a data packet, received at one port, only to a port known 
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to be connected to the destination device specified in the data packet. Such core 
devices can either be managed or urananaged. 

A managed device is capable of monitoring data packets passing through its ports. 
For example, a managed device can learn the physical or MAC addresses of the 
devices connected to its ports by monitoring the source address of data packets 
passing through the respective ports. Identified source addresses transmitted from a 
port of a managed network device, such as a router, hub, repeater or switch, are stored 
in a respective "address table" associated with the port, as described further below. 

Managed devices additionally have the capability of communicating using a 
management protocol such as the Simple Network Management Protocol (SNMP), as 
described in more detail below. Whilst the following description is concerned with 
the SNMP management protocol, the skilled person will appreciate that the invention 
is not limited to use with SNMP, but can be applied to managed networks using other 
network management protocols. 

SNMP defines agents, managers and MIBs (where MIB is Management Information 
Base), as well as various predefined messages and commands for communication of 
management data. An agent is present in each managed network device and stores 
management data and responds to requests from the manager. A manager is present 
within the network management station of a network and automatically interrogates 
the agents of managed devices on the network using various SNMP commands, to 
obtain information suitable for use by the network administrator, whose function is 
described below. A MIB is a managed "object" database which stores management 
data obtained by managed devices and is accessible to agents for network 
management applications. 

It is becoming increasingly common for an individual, called the "network 
administrator", to be responsible for network management, and his or her computer 
system or workstation is typically designated the network management station. The 
network management station incorporates the manager, as defined in the SNMP 



3 



protocol, i.e. the necessary hardware, and software applications to retrieve data from 
MIBs by sending standard SNMP requests to the agents of managed devices on the 
network. 

5 Network management software applications are known which can determine the 
topology of a network, i.e. the devices on the network and how they are linked 
together. In order to determine the network topology, the application retrieves MIB 
data from the managed devices on the network, which can provide information about 
the devices connected to the managed devices, for instance the aforementioned 
10 "address tables". MIB data retrieved from managed devices can also provide 
information about device type, device addresses and details about the links. Using 
such data, the application can usually determine the topology of the entire network. 

An example of a known network management software application capable of 
15 detennining network topology is the Transcend® Network Supervisor (Vereion 2.0) 
application available from 3Com Corporation of Santa Clara, California, USA. 

This system, and other similar systems, determines the topology of the network by 
building a "network tree". In particular a network device or "node" is selected as a 
20 "root node" (which is typically a managed switch or bridge) and the system uses the 
MIB data to determine the identity of all the "child nodes" of each of the ports of a 
root node. 

The child nodes of a given port are the devices, the addresses of which the port has 
25 learnt by monitoring the source addresses of data packets passing through the port. In 
other words, the child nodes are network devices which are connected on a "branch" 
of the network to the relevant port, and which have sent data packets to network 
devices on other branches of the network through the root device. 

30 The process is then repeated for each of the child nodes, to determine which nodes are 
children of each child node, their orientation with respect to each other and thus the 
structure of the branch. This process builds up the "network tree". More details of 



the manner of determining network topology in this way can be found in RFC 2108 
"Definitions of Managed Objects for IEEE 802.3 Repeater Devices using SMIv2", 
which is incorporated herein by reference. 

A problem with this method of detennining network topology is encountered when 
the topology of a network is not a "tree", but includes a "loop". A loop is formed 
when an additional link is introduced in the network topology to provide an additional 
network path between network devices. Such additional links are often included to 
provide additional resilience to the network, Le. to enable data packets to be 
communicated between devices even when a link between the devices is inactive (e.g. 
physically broken). 

However, a loop can give rise to problems on a network. In particular, since there is 
more than one path between two network devices, data packets may be duplicated, 
since core network devices, such as switches, will send packets along all possible 
paths to the destination device, leading to excessive network traffic. 

To overcome this problem, a Spanning-Tree Protocol is employed to ensure that only 
one active path exists between any two network devices. This is achieved by making 
the other possible paths redundant. A known Spanning-Tree Protocol is defined in the 
IEEE 802.1D Bridge Protocol standard, which is incorporated herein by reference. 
The skilled person will appreciate that other suitable Spanning-Tree protocols may be 
employed. 



This Spanning-Tree Protocol (STP) is a link management protocol implemented in 
managed network devices, in particular, switches. STP defines Spanning-Tree data 
packets which are exchanged by switches during a negotiation process, as described 
below. STP additionally defines the following possible states for a port of a switch: 
blocking; listening; learning; forwarding and disabled. A port in the blocking state 
discards received data packets, and discards data packets passed to the port by the 
switch for forwarding, and is thus "inactive". This state is effective to prevent 
duplication of data packets where two possible paths exist to the destination device. 
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As previously indicated, a problem arises with the above described method of 
determining network topology by the network management system if loops are 
present on the network. Even if STP is implemented, prior to completion of the 
negotiation process, data packets will be passed along the possible different paths to 
5 the same network device. Consequently, ports which are eventually placed in the 
blocking state still learn and store addresses in their address tables at this stage. Thus, 
in attempting to build a "tree" using the aforementioned method, the network 
management system will find, for instance, that several devices on different branches 
of the tree share a child device. The resulting conflicting information can make it 
1 0 impossible to determine the network topology. 

The present invention aims to address this problem. 

In accordance with a first aspect, the present invention provides a method for 
15 determining the topology of a network in which a Spanning-Tree protocol is 
inq>lemented, and in which the identity of the devices on the network can be 
determined, the method comprising the steps of: obtaining address table data for the 
ports of core network devices on the network, the address table data including the 
identity of each said port and the addresses of other network devices which the port 
20 has learnt; obtaining Spanning-Tree protocol information from one or more of the 
core network devices; using the Spanning-Tree protocol information, processing the 
address table data, by removing data relating to ports having links which are in a 
blocking state, and providing the processed address table data for use to build a 
network tree to determine a topology of the network. 

25 

By removing address table data relating to ports having inactive links, the remaining 
data corresponds to a network without additional links, leading to loops (Le. a tree). It 
is therefore possible to employ a conventional "tree-building" method to determine 
the network topology without the problems associated with data relating to inactive 
30 links. 

In a preferred embodiment, the method further includes building a data representation 



of a network tree. The method preferably thereafter retrieves the previously removed 
data relating to ports having links which are in the blocking state, and determines 
links to the ports in the blocking state which may then be added to the network 
topology so that the true topology of the network is determined. 

In accordance with a second aspect, the present invention provides a computer 
program for implementing the method of the first aspect of the present invention. 

In accordance with a third aspect, the present invention provides a network 
management apparatus for determining the topology of a network in which a 
Spanning-Tree protocol is implemented, the apparatus comprising: means for 
obtaining address table data for the ports of the core network devices on the network, 
the address table data including the identity of each said port and the addresses of 
other network devices which the port has learnt; means for obtaining Spanning-Tree 
protocol information from at least one of the core network devices; processing means 
for processing, using the Spanning-Tree protocol information, the address table data, 
the processing means for removing data relating to ports having links which are in a 
blocking state, and means for providing the processed address table data for use to 
build a network tree to determine a topology of the network. 

Other preferred or optional features of the present invention will be apparent from the 
following description and accompanying claims. 

Embodiments of the present invention will now be described, by way of example, 
with reference to the accompanying drawings, in which: 

Figure 1 is a block diagram of a conventional network having a tree structure; 

Figure 2 is a flow diagram of a conventional method for determining the topology of 
the network of Figure 1; 

Figure 3 is a block diagram of a network, similar to the network of Figure 1, but with 
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an additional link which forms a loop; 

Figure 4 is a flow diagram of a method for determining the topology of the network of 
Figure 3, in accordance with a preferred embodiment of the present invention, and 

5 

Figure 5 is a flow diagram showing a method for presenting the topology of the 
network determined by the method of Figure 4. 

Figure 1 shows a conventional local area network 1, comprising a plurality of network 
10 devices including endstations 3 with identifiers m, x, y and z, Switches 5 with 
identifiers A, B, C, D and E, and links 7. The endstation 3A with identifier m is 
designated the management station and includes the necessary hardware and software 
applications for network management, as well known in the art. In particular, the 
management station 3A includes network management software for determining the 
15 topology of the network by building a network tree, as described above, and a display 
screen for displaying a graphical representation or "map" illustrating the determined 
topology. 

Figure 2 illustrates a conventional method which can be used to determine the 
20 topology of a network in the form of a tree, such as the network shown in Figure 1. 
The method is typically implemented in a computer program which forms part of a 
network management software application running on the network management 
station. The program initially retrieves network management information (e.g. NUB 
data) from managed network devices using, for example, SNMP commands in order 
25 to determine the identity and type of the devices on the network. 

The network management data also includes the address tables described above. As is 
well known in the art, various types of SNMP MIB data address tables are known. 
One such address table is defined in RFC 1493 "Definitions of Managed Objects for 
30 Bridges". Proprietary address tables are also known. The present invention can be 
implemented using any of these address tables. 



The retrieved network management data is stored in a data storage, such as a database, 
and is then used to perform the following steps. 

In step 101, the identity of all the nodes (devices) on the network is determined from 
the retrieved data, and step 102 determines which of the nodes are core network 
devices (Le. devices which connect to more than one other device, as opposed to 
endstations which connect to only one other network device). 

In step 103, the program determines the identity of the ports of each of the core 
network devices, and in step 104 the Address Tables of all the ports determined in 
step 103 are read. It will be appreciated that the Address Table data may be read 
during the initial stages of the program (not shown) and stored in the aforementioned 
data storage, in which case step 104 merely retrieves the relevant data from the data 
storage. 



Thus, steps 101 to 104 produce a data Table for each of the core network devices, i.e. 
the switches 5, of the network 1 of Figure 1. Each Table indicates the identity 
(address) of the each of the ports of the switch 5 and the addresses of other network 
devices learnt by that port. 



For example, for Switch B, the method will construct the following Table 1 : 
Port of Switch B child nodes 

Bl m 
B2 D x 

B3 E 

84 A C y z 



In step 105, the program selects one of the core network devices as a root node. 
Various methods for selecting the most appropriate device as the root node are 
known, and for the purposes of the present description any appropriate method may 
be employed. 



9 



At step 110, the program performs a "tree-building" algorithm to determine the 
immediate children of the ports of the root node (Le. the devices immediately 
connected to or "facing" each port) and the children of each child node, if any. The 
topology of the network 1 can thus be constructed and presented to the network 
5 administrator, for example by display on the display screen of the network 
management station 3 A. 

Figure 3 shows an example of a local area network 1A in accordance with the present 
invention. It will be appreciated that the illustrated network is simplified for the 

10 purposes of this description, and that many other possible network arrangements are 
possible. The network 1A is identical to the network 1 of Figure 1, except that it has 
an additional link 7A. Link 7A provides a direct connection between Switch B and 
Switch C. This forms a loop between Switch A, Switch B and Switch C. In order to 
avoid the duplication of data packets forwarded between these Switches, the network 

15 1A implements STP. By enabling STP on Switches A, B and C, the switches perform 
negotiation whereby they communicate with each other, using STP, to determine 
where the loop exists and to "block" one or more ports to prevent the loop from 
causing data replication. 

20 For example, suppose that as a result of the STP negotiation process, Switches A, B 
and C elect to place port 5 of Switch B in the "blocking state", therefore preventing 
data packets from being passed from that port along link 7A. At the other end of link 
7A, port 4 of Switch C is placed in the "forwarding state" in accordance with the STP 
negotiation process. In the forwarding state, a port forwards received and switched 

25 data packets and responds to network management messages. The link 7A is 
effectively inactive because port 5 of switch B is in the "blocking state", and the 
network 1A passes data packets in the same way as the network topology of network 
1 of Figure 1, 
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However, prior to completion of the negotiation process, port 5 of Switch B may have 
learnt the addresses of endstations y and z from communications from endstations y 
and z to endstations m and x, and port 4 of Switch C may similarly have learnt the 
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addresses of endstations m and x from communications from endstations m and x to 
endstations y and z This may lead to conflicts in the address tables of the ports of 
Switches B and C which will make it impossible for the tree-building algorithm to 
determine the topology of the network. 

Accordingly, in order to determine the topology of network 1A, the method of the 
present invention is employed. 

Figure 4 illustrates the method for detennining the topology of network 1A in 
accordance with a preferred embodiment of the present invention. The method of the 
preferred embodiment is implemented in the form of a computer program which is 
part of a network management software application for running on a network 
management station. The computer program may be provided on a magnetic or 
optical disk for loading onto the network management station or downloaded as a 
carrier wave over a suitable communications medium from a website, for example. It 
will be appreciated that the method may also be implemented in other forms such as 
hardware. 



As shown in Figure 4, the method includes steps similar to the method of Figure 2. 
Prior to the illustrated steps, the program initially retrieves network management 
information (MIB data) from managed network devices using SNMP commands to 
determine inter alia the identity of devices on the network. The retrieved network 
management data is stored in a data storage, such as a database, and is then used to 
perform the following steps. 

In step 201, the identity of all the nodes (devices) on the network is determined from 
the retrieved data. The identity of a node includes at least its network addresses 
(MAC address and, if appropriate, IP address). In determining the identity of the 
nodes in step 210, the program typically creates a "node list" which is stored in the 
aforementioned database for use in determining the network topology, as will be 
appreciated from the following. At step 202 the program determines which of the 
nodes are core network devices (i.e. devices which connect to more than one other 
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device, as opposed to endstations which connect to only one other network device). It 
is possible to determine which of the nodes are core network devices using 
information retrieved in response to well known SNMP commands from the network 
management station 3 A, which information is stored in the database. 

5 

In step 203, the program determines the identity of the ports of each of the core 
network devices. In particular, the program establishes from the data in the database, 
for each core network device, the number of ports, the identity of the ports and 
whether they are enabled (i.e. whether they have a valid link and are therefore 

10 connected to another device). The details of the ports for each core network device, 
determined in step 203, is added to the "node list" for future use. In step 204 the 
SNMP Address Tables, for all of the ports determined in step 203, are read using 
SNMP commands, and the data stored alongside the "node list" in the database. It 
will be appreciated that the Address Table data may be read during the initial stages 

15 of the program (not shown) and stored in a different area of the aforementioned data 
storage, in which case step 204 merely retrieves the relevant data from the data 
storage and places it with the "node list". 

Thus, steps 201 to 204 produce a data Table for each of the core network devices, i.e. 
20 the switches 5, of the network 1 A of Figure 3. Each Table indicates the identity 
(address) of the each of the ports of the switch 5 and the addresses of other network 
devices learnt by that port. 

For example, for Switch B, the method may construct the following Table 2: 



25 Port of Switch B Child nodes 

Bl m 

B2 D x 

B3 E 

B4 A C y 

30 B5 z 



Port 4 of Switch B has learnt the addresses of Switches A and C and endstation y, but 
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not endstation z. The address of endstation z is instead learnt by port 5 since, due to 
the random nature of switching at the initial stage, prior to completion of negotiation, 
data packets from endstation z were switched by Switch C to port 5 of Switch B, and 
thus, seen and learnt by port 5 of Switch B. 

method may construct the following Table 3: 
Child nodes 
ABDEmx 

y 

z 



Thus, it can be seen from Tables 2 and 3 that there is conflicting information relating 
to the connections between Switch B, Switch C and device z, due to the loop resulting 
from link 7 A. If the tree-building algorithm were now to be employed in accordance 
with the method of Figure 2, it would not be possible to resolve the topology of the 
network. 

Accordingly, instead of proceeding immediately with the tree-building algorithm, the 
method of Figure 4 continues with step 205 which determines which core network 
devices are S TP-enabled and at step 206 by retrieving STP information, as described 
below, from all the STP-enabled network devices determined in step 205. This STP 
information is determined during Spanning-Tree negotiation and subsequently stored 
by all STP-enabled devices, i.e. in the case of network 1A the Switches A, B and C. 

In particular, during Spanning-Tree negotiation, each device (switch) advertises itself 
using a unique ID, called the "Bridge ID" (normally based on MAC address). In 
addition each device assigns a unique ID to each of its ports, the "Port ID". At the 
end of negotiation, one of the ports at the end of a link is designated as the Designated 
Port and its Bridge ID and Port ID are respectively adopted as the Designated Bridge 
ID and the Designated Port ID for both ports connected to the link. Thus, two ports, 
which are directly connected together, have the same Designated Bridge ID and 



At the same time, for Switch C, the 
Port of Switch C 
CI 
C2 
C3 
C4 
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Designated Port ID. The STP information thus contains the Designated Bridge ID 
and the Designated Port ID for each port of each STP enabled network device. 

In addition, the STP information includes the states of each of the ports of the devices 
5 as determined by the Spanning Tree negotiation process. 

Further details about STP information, and in particular the Designated Bridge and 
Designated Port IDs can be found in the RFC 1493 "Definitions of Managed Objects 
for Bridges" which is incorporated herein by reference. 

10 

At step 207 the program determines all ports which are in the blocking state and 
removes from the Address Tables data relating to all ports in the blocking state. Thus, 
for example, for the address list relating to Switch B set out in Table 2 above, the data 
relating to port 5 will be removed, since port 5 is in the blocking state. 

15 

Whilst the learnt addresses for ports removed in step 207 may be discarded, in 
accordance with the preferred embodiment of the present invention this data is 
retained, by storage in the data storage or otherwise, for further use, as outlined 
below. 

20 

Following step 207, the address list for Switch B will correspond to the list of Table 1, 
since all data relating to the blocked port has been discarded. The data remaining thus 
represents a network having a tree configuration (i.e. without any loops), and the data 
can be processed using a conventional tree-building algorithm. 

25 

At step 208 the method selects the root node as described above. The manner of 
selection is not significant to the present invention, and any suitable method may be 
employed. 

30 Accordingly, at step 210 the program performs a tree-building algorithm, using the 
data resulting from step 207, to determine the topology of the network. Any suitable 
algorithm may be employed for this purpose and many techniques are known as 



discussed previously. 
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The result of the topology determination will correspond to the topology of the 
network 1A but without the additional link 7A. This topology may be sufficient for 
the needs of the network management application and may be presented to the 
network administrator. This is achieved by creating, a data representation of a 
connection or link between each port in the tree that has a child. Each connection 
item will have two pieces of information associated with it - the device and port of 
the parent and the device and port of the child. A child device that is an endstation 
will not have a port. Thus, a list of connections is created which can be stored in the 
database and presented to the network administrator in the desired format. 

In accordance with the preferred embodiment, however, and in order to present the 
network admiinstrator with the true topology of the network, the program continues 
with the program steps illustrated in Figure 5. 

In step 301, the program retrieves the data removed in step 207 of Figure 4, i.e. the 
data relating to all ports which are in the blocking state. At step 302 the program 
determines from the retrieved data the additional links, which are inactive due to one 
of the ports at the end of the link being in the blocking state. This is achieved by 
matching each port in the blocking state with the port at the other end of the inactive 
link. As indicated above, the STP information includes the Designated Bridge ID and 
the Designated Port ID for each port, and as a result of the STP negotiation process, 
ports at each end of an inactive link have the same Designated Bridge ID and 
Designated Port ID. Thus, the program can simply construct the additional inactive 
links by pairing ports having the same Designated Bridge and Designated Port IDs 
using the STP information. 



At step 303, the program presents the network topology, indicating the additional 
links as in the inactive or blocking state. The network topology may be presented on 
the display screen of the network management station 3A or may be printed from the 
station 3A using a printer. The network topology may be presented graphically in the 
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form of a network map, with icons for devices and lines for links, as is well known in 
the art, in which case the additional links may be represented by lines of a different 
form (e.g. dotted lines) or colour. Alternatively, the network topology may be 
presented as a list of connections, e.g. "Switch A, port 2 connected to Switch C, port 
1", in which case the inactive connections can be indicated as blocked, e.g. "Switch B, 
port 5 (blocked) connected to Switch C, port 4". 

As indicated above, the method of the present invention is performed in a network 
management station in accordance with the present inventioa The network 
management station 3A comprises a processor, a disk drive, memory, and user 
interfeces including a display screen, keyboard, mouse, and a printer. The computer 
program described above is typically loaded onto the network management station 
using the disk drive and processor runs the program 

As the skilled person will appreciate, various changes and modifications may be made 
to the described embodiments. It is intended to include all such variations, 
modifications and equivalents which fell within the scope of the present invention as 
denned in the accompanying claims. 
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CLAIMS : 

1. A method for use in determining the topology of a network in which a 
Spanning-Tree protocol is implemented, and in which the identity of the devices on 
the network can be determined, the method comprising the steps of: 

obtaining address table data for the ports of core network devices on the 
network, the address table data including the identity of each said port and the 
addresses of other network devices which the port has learnt; 

obtaining Spanning-Tree protocol information from one or more of the core 
network devices; 

using the Spanning-Tree protocol information, processing the address table 
data, by removing data relating to ports which are in a blocking state, and 

providing the processed address table data for use to build a network tree to 
determine a topology of the network. 

2. A method as claimed in claim 1, wherein the step of removing comprises 
determining the ports that are in the blocking state, and removing address table data of 
those ports. 

3. A method as claimed in claim 1 or claim 2, further comprising building a data 
representation of the network tree, thus detennining a topology of the network. 

4. A method as claimed in claim 3, further comprising presenting the determined 
topology of the network. 

5. A method as claimed in claim 4, wherein the step of removing comprises 
storing the removed data in memory. 
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6. A method as claimed in claim 5, wherein, prior to the step of presenting, the 
method further comprises the step of retrieving the removed data from memory, and 
determining links for the ports in the blocking state. 

7. A method as claimed in claim 6, wherein the Spanning-Tree protocol 
5 information includes a Designated Bridge identifier and a Designated Port identifier, 

and said step of determining links for the ports in the blocking state comprises 
matching pairs of ports having the same Designated Bridge and Designated Port 
identifiers and determining a link between each matched pair of ports. 

8. A method as claimed in claim 5, 6 or 7, further comprising adding the 
10 determined links for the ports in the blocking state into the network topology. 

9. A method as claimed in any preceding claim, wherein the step of obtaining the 
Spanning-Tree protocol information comprises, identifying the core network devices 
in which the Spanning-Tree protocol is enabled, and retrieving the Spanning-Tree 
protocol information from the identified core network devices. 

15 10. A method as claimed in any preceding claim, wherein, prior to the step of 
obtaining address table data, the method comprises: 

determining the identity of the core network devices on the network; 

determining the identity of the ports of the core network devices, and 

reading the address tables of the ports of the core network devices. 

20 11. A method as claimed in any preceding claim, wherein the step of determining 
the identity of the core network devices includes sending an SNMP data request onto 
the network, and receiving and processing the response. 

12. A method for determining the topology of a network in which a Spanning- 
Tree protocol is implemented substantially as hereinbefore described, with reference 
25 to, and as shown in, Figures 3, 4 and 5 of the accompanying drawings. 
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13. A method for use in determining the topology of a network in which a 
Spanning-Tree protocol is implemented substantially as hereinbefore described with 
reference to, and as shown in, the accompanying drawings. 

14. A computer program on a computer readable medium, for carrying out the 
method as claimed in any preceding claim. 

15. A network management apparatus for determining the topology of a network 
in which a Spanning-Tree protocol is implemented, the apparatus comprising: 

means for obtaining address table data for the ports of the core network 
devices on the network, the address table data including the identity of each said port 
and the addresses of other network devices which the port has learnt; 

means for obtaining Spanning-Tree protocol information from at least one of 
the core network devices; 

processing means for processing, using the Spanning-Tree protocol 
information, the address table data, the processing means for removing data relating to 
ports having links which are in a blocking state, and 

means for providing the processed address table data for use to build a 
network tree to determine a topology of the network. 

16. An apparatus as claimed in claim 15, further comprising memory for storing 
data for use in determining the network topology. 

17. An apparatus as claimed in claim 15 or claim 16, further comprising a display 
screen and/or a printer for presenting the determined topology of the network. 

18. A network management apparatus for determining the topology of a network 
in which a Spanning-Tree protocol is implemented substantially as hereinbefore 
described with reference to, and as illustrated by, the accompanying drawings. 
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